This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer File: 74x3yBft3T_cxmtjUtbqeNcsWsY.cer (raw, json) Hash identifier: ewrrG6G9yrXhmTeWQLn05DDvMD5kAXqs1F2ojE2Kic4= Subject key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FA8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 05:43:05 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.76.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28584 (0x6fa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 5 05:43:05 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:04:05:e2:19:71:8b:e0:02:84:0f:1e:37: 3f:c0:91:c3:c3:1e:b4:bb:ff:33:58:47:6a:b4:fe: 3e:59:95:87:ae:cc:6b:06:e5:24:5f:4e:1d:f0:ab: 97:63:0d:2a:a4:9d:52:e4:a4:76:24:93:d2:cf:99: 17:eb:93:76:1b:d6:15:bc:32:b0:30:66:ad:d4:3f: 2b:e0:59:e4:1a:de:c9:ba:4f:9a:18:7d:ac:de:71: eb:3d:39:f3:62:07:42:5d:da:4c:32:96:41:9b:7f: be:2f:32:07:3a:9f:53:c6:85:ae:08:ca:2c:61:39: 3f:cb:f0:e0:7e:23:da:e1:73:f5:11:9d:a8:e3:a3: 91:7c:5a:25:59:36:a0:13:b8:24:0e:00:99:a7:52: 65:23:94:56:f5:3b:94:21:cb:28:7d:06:92:4e:55: 0d:a2:91:29:00:b6:b5:11:ae:77:bd:97:ff:99:9c: 0f:4d:7d:08:61:0c:45:75:11:2a:9d:a5:b2:99:c1: 9d:3a:1a:59:f7:34:35:0a:39:51:55:58:be:1d:3d: 62:2a:bf:7f:fc:62:ea:86:06:1d:cf:80:2a:2b:7a: 83:bb:45:34:d7:81:bf:6d:e7:d1:dd:ab:f3:01:ff: 6a:9c:67:5c:84:c1:02:1a:dc:51:1a:2e:3d:d7:e5: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.76.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:1b:2e:e5:d3:3e:16:74:17:02:e3:02:d2:ec:a3:c5:86:29: d4:ac:a8:a3:da:a5:d2:89:09:ec:be:04:eb:a8:11:19:02:f7: df:2a:41:56:9b:b8:da:86:a8:e9:8b:38:4d:61:a0:14:9f:d3: 77:6d:3a:2e:9f:cf:bc:13:78:95:26:2d:14:80:7c:c2:60:6b: e0:96:03:37:b6:5e:c5:cd:bc:ce:f5:af:89:a3:a1:c7:96:3c: 21:3a:eb:93:33:50:fa:00:e6:94:c6:ee:fa:05:2f:43:01:07: 25:93:a0:28:59:b8:34:f1:29:aa:98:61:5b:67:f1:70:1f:8d: 9e:30:58:38:c1:70:85:fe:5d:f2:16:97:ac:bf:85:4c:04:36: a5:15:34:d1:6f:c4:36:44:72:85:e9:8b:96:52:9f:55:4c:4d: 08:cb:df:ba:84:21:59:36:7f:80:95:64:6d:fd:0a:b6:cf:1a: ee:f7:03:46:0f:f3:ad:ab:9f:2a:eb:e8:eb:d1:24:c2:a1:e2: 0f:31:d8:3f:81:86:a6:4a:54:12:7c:3b:56:7c:01:44:24:03: 19:88:cf:f7:3f:31:66:9b:80:36:ce:52:68:db:0f:6b:a7:f3: 1d:aa:09:93:4a:fc:a1:9f:e8:1d:4e:46:35:15:dd:43:15:4e: 8e:ed:58:0c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA1MDU0MzA1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFEQUJBQTExMC8GA1UEBRMoRUY4Qzc3QzgxN0VEREQzRkRDQzY2QjYz NTJENkVBNzhENzJDNUFDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJzhBAXiGXGL4AKEDx43P8CRw8MetLv/M1hHarT+PlmVh67MawblJF9OHfCrl2MN KqSdUuSkdiST0s+ZF+uTdhvWFbwysDBmrdQ/K+BZ5BreybpPmhh9rN5x6z0582IH Ql3aTDKWQZt/vi8yBzqfU8aFrgjKLGE5P8vw4H4j2uFz9RGdqOOjkXxaJVk2oBO4 JA4AmadSZSOUVvU7lCHLKH0Gkk5VDaKRKQC2tRGud72X/5mcD019CGEMRXURKp2l spnBnToaWfc0NQo5UVVYvh09Yiq/f/xi6oYGHc+AKit6g7tFNNeBv23n0d2r8wH/ apxnXITBAhrcURouPdflXHkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTvjHfIF+3d P9zGa2NS1up41yxaxjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REFCQUEvNDIwQzBGNkVEMTlEMTFGMDgzODE0MTcwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURBQkFBLzQyMEMwRjZFRDE5RDExRjA4MzgxNDE3MEM0RjlBRTAyLzc0eDN5QmZ0 M1RfY3htdGpVdGJxZU5jc1dzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPTDANBgkqhkiG9w0BAQsFAAOCAQEAHRsu5dM+FnQXAuMC0uyj xYYp1Kyoo9ql0okJ7L4E66gRGQL33ypBVpu42oao6Ys4TWGgFJ/Td206Lp/PvBN4 lSYtFIB8wmBr4JYDN7Zexc28zvWviaOhx5Y8ITrrkzNQ+gDmlMbu+gUvQwEHJZOg KFm4NPEpqphhW2fxcB+NnjBYOMFwhf5d8haXrL+FTAQ2pRU00W/ENkRyhemLllKf VUxNCMvfuoQhWTZ/gJVkbf0Kts8a7vcDRg/zraufKuvo69EkwqHiDzHYP4GGpkpU Enw7VnwBRCQDGYjP9z8xZpuANs5SaNsPa6fzHaoJk0r8oZ/oHU5GNRXdQxVOju1Y DA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:31 2025 by rpki-client